Security Analyst

Acuity INC•, DC

7d•$87,000 - $194,000

About The Position

Looking to make a difference and help protect critical government missions? Join Acuity's cybersecurity team supporting the U.S. Department of State. As a Security Analyst, you will support day-to-day cybersecurity operations by monitoring security events, managing user access, tracking vulnerabilities, supporting compliance activities, and assisting with continuous monitoring initiatives. Working alongside cybersecurity engineers, cloud engineers, system administrators, and government stakeholders, you will help maintain a secure enterprise environment while supporting modernization efforts across cloud, infrastructure, and applications.

Requirements

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or related field (or equivalent experience).
Minimum of three (3) years of experience supporting cybersecurity operations, information assurance, or security administration.
Experience with Active Directory, user account management, group management, or access control administration.
Experience working with one or more SIEM or enterprise security monitoring platforms.
Experience reviewing vulnerability scan results or supporting vulnerability remediation activities.
Familiarity with NIST RMF, FISMA, or other federal cybersecurity frameworks.
Strong analytical, organizational, communication, and problem-solving skills.
Ability to work collaboratively in a team environment and communicate effectively with technical and non-technical stakeholders.

Nice To Haves

Security+, CySA+, SSCP, GSEC, or comparable cybersecurity certification.
Experience supporting the U.S. Department of State or other federal civilian agencies.
Experience with Microsoft Defender, Microsoft Sentinel, Splunk, ServiceNow, Tenable Nessus, Qualys, or similar enterprise security tools.
Familiarity with cloud security concepts, identity and access management (IAM), or continuous monitoring.
Experience supporting Agile, DevSecOps, or enterprise IT modernization initiatives.

Responsibilities

Monitor enterprise security alerts, events, and system activity to identify potential security issues and escalate findings as appropriate.
Review and manage user access requests, Active Directory security groups, shared resource permissions, and privileged accounts in accordance with least-privilege principles.
Conduct periodic user access reviews and entitlement reviews to ensure appropriate access to enterprise systems, applications, and data.
Review vulnerability scan results, track remediation activities, and coordinate with technical teams to resolve security findings.
Support continuous monitoring activities by assisting with security assessments, compliance reviews, and control validation efforts.
Assist with incident response activities by gathering information, documenting findings, and supporting cybersecurity personnel during investigations.
Support security audits by collecting documentation, maintaining audit artifacts, and assisting with remediation tracking.
Maintain security documentation, standard operating procedures (SOPs), and operational records.
Prepare routine security reports, metrics, and status updates for program leadership and government stakeholders.
Collaborate with cybersecurity engineers, system administrators, and application teams to improve security processes and support enterprise modernization initiatives.
Perform additional duties as assigned in support of customer mission objectives.